
<form method="post" class="login">
  <?php echo $form['_csrf_token']->render(); ?>
  <fieldset>
    <legend>Login</legend>
    <ul>
      <li>
        <div><?php echo $form['username']->renderError(); ?></div>
        <label><?php echo $form['username']->renderLabel(); ?></label>
        <span><?php echo $form['username']->render(); ?></span>
      </li>
      <li>
        <div><?php echo $form['password']->renderError(); ?></div>
        <label><?php echo $form['password']->renderLabel(); ?></label>
        <span><?php echo $form['password']->render(); ?></span>
      </li>
      <li class="submit">
        <div><?php echo $form->renderGlobalErrors(); ?></div>
        <input type="submit" value="Login" />
      </li>
    </ul>
  </fieldset>
</form>
